CyberRota Analysis
AI-GeneratedDocker users running versions prior to 4.0.0-beta.474 of Coolify are vulnerable due to inadequate validation of database credential fields, which are directly interpolated into Docker Compose YAML commands without proper escaping. This oversight could lead to potential command injection attacks, allowing an attacker to execute arbitrary commands within the Docker environment. Organizations utilizing Coolify for server and application management should prioritize upgrading to the fixed version to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, database credential fields (redis_password, keydb_password, dragonfly_password, clickhouse_admin_user, clickhouse_admin_password, postgres_user, mysql_user) are validated only as 'string' at the API layer, with zero shell-safety checks. These values are then interpolated directly into Docker Compose YAML command: strings without any escaping. This issue is fixed in version 4.0.0-beta.474.